This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json) Hash identifier: xtJWjPAKZg7fTDZthFW0IvnOIcU97a6hRsClqphZdFE= Subject key identifier: D5:8D:94:69:5C:42:24:CE:01:29:A9:0C:B0:7C:00:7E:6A:C9:79:1B Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Certificate serial: 019B194D8F76BC0B3DE56D2FF08904F44374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft Manifest number: 1315 Signing time: Sat 13 Dec 2025 20:01:11 +0000 Manifest this update: Sat 13 Dec 2025 20:01:11 +0000 Manifest next update: Sun 14 Dec 2025 20:01:11 +0000 Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: z6LFD27Fg/0GNXxn9BgXTxFeeQv3xsDJkKQKpy2eHgI=) 2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:8f:76:bc:0b:3d:e5:6d:2f:f0:89:04:f4:43:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Validity Not Before: Dec 13 20:01:11 2025 GMT Not After : Dec 14 20:01:11 2025 GMT Subject: CN=d58d94695c4224ce0129a90cb07c007e6ac9791b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:29:34:5a:9d:3b:41:53:0c:e9:da:bb:4b:da: 44:08:f5:7d:97:ae:4c:f3:24:67:e1:d5:15:0f:65: c9:db:a8:01:77:c3:11:3c:dd:e0:4d:b8:92:2b:2b: a0:87:c3:20:7a:5f:7e:62:21:7d:5b:f6:39:b0:8f: 12:8c:ab:38:9d:69:49:f3:31:29:5f:c8:e0:a2:62: 64:36:f2:d2:07:09:0a:4a:25:8b:98:13:86:13:5c: 76:ce:ba:eb:1e:74:50:8c:0e:9b:7d:d8:9d:cf:86: 99:80:44:b2:73:86:f6:b0:18:b8:50:44:91:1b:6d: b5:1d:89:9f:8e:ba:c0:95:aa:28:fc:19:cb:ae:c4: 80:ed:0c:99:84:0e:d4:85:38:1c:f9:4a:11:2f:3d: e5:ca:18:82:26:19:21:de:bb:be:79:9f:c9:f9:c3: 2a:d1:5a:08:67:84:04:87:69:29:10:c1:42:f7:63: 5b:c8:47:0f:39:40:27:fa:b6:ac:d2:71:ee:e3:88: e7:f2:76:5d:e9:4f:51:b2:db:79:fd:38:a3:ab:fb: ae:19:f1:b3:6e:a6:15:99:41:1b:c0:cd:46:fe:07: 9b:a1:24:8e:ff:fb:b3:33:6d:f2:c0:5e:37:5f:a5: 59:43:c4:a8:34:13:ca:7c:2b:f9:08:e5:d9:9b:16: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8D:94:69:5C:42:24:CE:01:29:A9:0C:B0:7C:00:7E:6A:C9:79:1B X509v3 Authority Key Identifier: keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7c:53:cc:26:54:87:bb:61:94:86:29:95:41:23:b1:9e:74: ed:4e:5f:17:90:e3:ec:2b:ea:52:d6:24:df:f8:82:68:d4:db: db:71:cd:7a:9c:98:b2:d3:34:99:eb:85:21:31:6d:c5:39:59: af:2d:db:e8:fb:7b:0b:3b:d7:51:75:80:bd:a7:02:af:68:e5: 8d:0a:78:13:e6:60:c3:0b:85:1d:f4:56:0f:72:18:e7:13:f2: 26:d8:12:f5:a1:23:b5:b3:c1:d4:d9:46:28:e9:60:a7:b2:03: 91:42:9b:18:db:c4:98:e0:3d:18:f9:30:6d:e2:b4:2e:09:ff: 04:2d:7b:8f:d3:03:c3:f9:1c:92:ba:94:13:31:30:90:fb:6d: 89:9e:1f:06:8b:09:f9:4d:12:d1:dc:06:1a:d9:08:a5:7f:5a: 16:8c:1f:c3:81:35:d2:32:29:ad:9b:86:82:be:54:1d:84:21: 5e:31:20:48:aa:c9:f1:6b:bc:c7:e7:f6:e8:16:56:54:ed:5a: 14:31:d6:14:a1:a9:98:2f:57:aa:00:6f:df:d5:12:90:6d:8f: cd:e9:ef:11:a7:e3:04:23:13:17:20:7c:d3:45:c7:5a:2f:43: 75:d9:f5:5e:62:4f:07:40:73:8b:d5:9a:df:7f:d8:7d:82:df: 81:21:2e:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTY92vAs95W0v8IkE9EN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2 ZTJmMDgwHhcNMjUxMjEzMjAwMTExWhcNMjUxMjE0MjAwMTExWjAzMTEwLwYDVQQD EyhkNThkOTQ2OTVjNDIyNGNlMDEyOWE5MGNiMDdjMDA3ZTZhYzk3OTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoik0Wp07QVMM6dq7S9pECPV9l65M 8yRn4dUVD2XJ26gBd8MRPN3gTbiSKyugh8Mgel9+YiF9W/Y5sI8SjKs4nWlJ8zEp X8jgomJkNvLSBwkKSiWLmBOGE1x2zrrrHnRQjA6bfdidz4aZgESyc4b2sBi4UESR G221HYmfjrrAlaoo/BnLrsSA7QyZhA7UhTgc+UoRLz3lyhiCJhkh3ru+eZ/J+cMq 0VoIZ4QEh2kpEMFC92NbyEcPOUAn+ras0nHu44jn8nZd6U9Rstt5/Tijq/uuGfGz bqYVmUEbwM1G/geboSSO//uzM23ywF43X6VZQ8SoNBPKfCv5COXZmxZGdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWNlGlcQiTOASmpDLB8AH5qyXkbMB8GA1UdIwQY MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4 LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3xTzCZU h7thlIYplUEjsZ507U5fF5Dj7CvqUtYk3/iCaNTb23HNepyYstM0meuFITFtxTlZ ry3b6Pt7CzvXUXWAvacCr2jljQp4E+ZgwwuFHfRWD3IY5xPyJtgS9aEjtbPB1NlG KOlgp7IDkUKbGNvEmOA9GPkwbeK0Lgn/BC17j9MDw/kckrqUEzEwkPttiZ4fBosJ +U0S0dwGGtkIpX9aFowfw4E10jIprZuGgr5UHYQhXjEgSKrJ8Wu8x+f26BZWVO1a FDHWFKGpmC9XqgBv39USkG2PzenvEafjBCMTFyB800XHWi9Dddn1XmJPB0Bzi9Wa 33/YfYLfgSEuDw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:10:53 2025 by rpki-client